Application Security Engineer
D. E. Shaw, New York
About the job
The D. E. Shaw group seeks application security engineers to join its Information Security team within the Systems group. This team is dedicated to advancing the firm's security posture across a fast-paced, large-scale IT environment, supporting investment activity and technology development. As AI transforms traditional security review, this hands-on individual-contributor role combines partnering with developers on secure design and building the automated, AI-enabled tools that shape how application security is done at the firm.
Responsibilities
- Design, build, and operate agentic security workflows that continuously review code changes, using existing analyzers and custom analysis to investigate findings and propose fixes.
- Build evaluations, feedback loops, and guardrails that assess false positives, missed vulnerabilities, and the safety of proposed fixes, using known test cases and expert review.
- Lead security and design reviews for new and existing software, working directly with developers to identify vulnerabilities and recommend practical remediation.
- Help secure the firm's own use of agentic AI, assessing how developer agents and internal AI platforms handle identity, data access, and tool execution.